Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Windows Explorer' = '<Полный путь к вирусу>'
- 're####.funpic.de':80
- 'wp#d':80
- re####.funpic.de/ProjectX/KeyLg/PC/crnjeufu.txt
- wp#d/wpad.dat
- DNS ASK re####.funpic.de
- DNS ASK wp#d
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'